692a704f0874aebd07bac6eabeb6d984fc540f796c988129d6474a00ec0cd5c2N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

692a704f0874aebd07bac6eabeb6d984fc540f796c988129d6474a00ec0cd5c2N
Size

221KB
MD5

01671443ea36af5de14bc0482b690d10
SHA1

4847f03165072b94e242bfe33d8072875d497190
SHA256

692a704f0874aebd07bac6eabeb6d984fc540f796c988129d6474a00ec0cd5c2
SHA512

a0f24e715798a725b9cae8d4a5e90e7c1ca82b15cb9b6ace3d1a390f81025151d31b8119c8c812b4f067c326e6ef9bde95e0b59510c900021c1e84f18b5dd523
SSDEEP

3072:z/mKyHOeNvlLOUpKeap9NLq/mKyHOeNva/mKyHOeL/mKyHOe7:z2HPf0G2HPQ2H52HV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692a704f0874aebd07bac6eabeb6d984fc540f796c988129d6474a00ec0cd5c2N

Files

692a704f0874aebd07bac6eabeb6d984fc540f796c988129d6474a00ec0cd5c2N
.exe windows:4 windows x86 arch:x86

b5688d14696c0efcb4bfb3c1231064a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord518
ord626
ord598
ord520
ord525
EVENT_SINK_AddRef
ord528
ord529
ord560
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord531
ord716
ProcCallEngine
ord537
ord645
ord648
ord681
ord576
ord578
ord100
ord579
ord610
ord616
ord617
ord619
ord542
ord545
ord580

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ